$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be7fe56b-7ab0-3ed9-b0fb-3127ea71969d.roa File: be7fe56b-7ab0-3ed9-b0fb-3127ea71969d.roa (raw, json) Hash identifier: M6EHkGzZN489K3N55Kkmkl8+9MN3Ch4QQbhHk+5BuWM= Subject key identifier: 83:57:CC:93:EE:D2:FD:29:97:89:7D:C4:A7:29:7B:FE:E4:CA:DE:66 Certificate issuer: /CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Certificate serial: 010D0C9F4328584EF2E775847E266238471B5310 Authority key identifier: DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be7fe56b-7ab0-3ed9-b0fb-3127ea71969d.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 54113 IP address blocks: 131.125.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:75:84:7e:26:62:38:47:1b:53:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=77985a59-bfc4-4ba0-8d83-1aa48bafc7f1 Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=fa0db520-4a5c-466e-b0fb-63637ded0020 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:96:0a:b9:68:78:8b:02:e8:22:16:fe:09:a8: 37:4c:46:82:09:43:89:67:32:1c:cd:8f:7d:c5:2d: ca:4b:83:a9:55:56:24:bb:31:cb:fc:04:66:99:9f: 1a:a1:f0:23:67:b1:ed:cc:be:89:0a:b7:94:6c:ae: 93:64:22:b2:4c:ff:ae:49:0e:ce:36:78:14:cc:d1: d2:ab:c1:af:5f:8b:5f:90:9e:a0:63:fb:bd:cd:90: 69:bf:f6:9f:d0:57:37:6c:54:36:e6:92:1b:c1:e7: a3:45:8a:1d:4b:59:e6:cd:fa:a1:fa:bb:c8:dc:d5: 99:71:d7:27:15:91:25:5c:74:11:8c:5b:fd:e1:a2: 03:32:60:1e:2d:03:56:54:9e:65:69:62:0b:44:3c: ee:3c:14:35:19:80:06:be:62:7c:d2:09:25:16:ed: 6e:a6:e9:0b:89:e6:53:7e:07:cb:9a:53:e2:f5:86: 3d:eb:9f:d3:8b:40:f9:73:d5:55:f4:dc:82:8f:df: 80:2f:ac:de:a4:3c:a7:45:8d:65:41:67:69:98:88: 57:13:89:8d:01:94:69:65:2e:14:ae:55:ac:71:f6: d2:3d:4f:2e:0b:7b:43:39:37:9c:1e:95:e7:6b:43: 4f:46:65:9f:a6:be:85:3c:d2:d7:6b:f9:84:4c:4e: 8a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:57:CC:93:EE:D2:FD:29:97:89:7D:C4:A7:29:7B:FE:E4:CA:DE:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/be7fe56b-7ab0-3ed9-b0fb-3127ea71969d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.crl X509v3 Authority Key Identifier: keyid:DD:A5:12:83:66:AD:04:97:29:47:6D:BF:78:83:FE:8A:D0:8B:E0:02 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/77985a59-bfc4-4ba0-8d83-1aa48bafc7f1.cer sbgp-ipAddrBlock: critical IPv4: 131.125.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:91:f6:fc:84:2d:ce:5b:f1:4d:02:be:26:da:a1:22:27:4a: 04:99:fe:58:98:41:63:40:ba:e5:c1:6b:26:15:51:9c:d8:98: bf:65:73:b4:a6:84:a6:dc:ff:4f:45:eb:f6:8c:39:f2:99:ea: 09:ca:58:e7:86:7c:a3:ed:e7:b0:8e:f2:2e:db:c8:7f:c5:7a: d2:ac:53:d9:57:24:97:09:ea:32:e3:9a:ee:c7:45:73:6f:26: e6:6c:70:71:6e:62:49:74:9d:09:f9:94:32:3a:05:23:46:3c: 37:56:af:0c:09:7c:5f:4c:73:4f:6d:28:d5:12:50:7c:f3:fd: 2d:57:99:fc:c7:96:e3:cc:a0:10:07:8c:94:66:8c:73:b4:3b: 57:c2:8c:ed:42:f2:75:bc:83:62:36:04:12:7a:cc:a1:85:1e: a8:8b:d1:52:6d:5d:96:1e:ba:6d:7b:50:05:c6:12:6a:02:48: c6:1b:e4:a7:cc:65:1a:9f:b8:b6:db:04:50:a2:70:a4:fb:8a: 60:07:4c:1d:3a:45:7b:b7:ff:5f:18:c2:34:a4:96:2a:30:f1: c3:fb:d4:e7:f3:06:d3:dc:c1:b6:11:16:41:7a:99:7f:0d:20: 43:e9:e5:b6:b0:d4:0d:06:f7:2b:4f:51:e5:a9:67:83:1d:a0: c7:f4:cb:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y53WEfiZiOEcbUxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNzc5ODVhNTktYmZjNC00YmEwLThkODMtMWFhNDhiYWZj N2YxMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk ZmEwZGI1MjAtNGE1Yy00NjZlLWIwZmItNjM2MzdkZWQwMDIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5YKuWh4iwLoIhb+Cag3TEaCCUOJZzIczY99 xS3KS4OpVVYkuzHL/ARmmZ8aofAjZ7HtzL6JCreUbK6TZCKyTP+uSQ7ONngUzNHS q8GvX4tfkJ6gY/u9zZBpv/af0Fc3bFQ25pIbweejRYodS1nmzfqh+rvI3NWZcdcn FZElXHQRjFv94aIDMmAeLQNWVJ5laWILRDzuPBQ1GYAGvmJ80gklFu1upukLieZT fgfLmlPi9YY965/Ti0D5c9VV9NyCj9+AL6zepDynRY1lQWdpmIhXE4mNAZRpZS4U rlWscfbSPU8uC3tDOTecHpXna0NPRmWfpr6FPNLXa/mETE6KUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINXzJPu0v0pl4l9xKcpe/7kyt5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83Nzk4 NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0OGJhZmM3ZjEvYmU3ZmU1NmItN2FiMC0z ZWQ5LWIwZmItMzEyN2VhNzE5NjlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzc5ODVhNTktYmZjNC00YmEwLThk ODMtMWFhNDhiYWZjN2YxLzc3OTg1YTU5LWJmYzQtNGJhMC04ZDgzLTFhYTQ4YmFm YzdmMS5jcmwwHwYDVR0jBBgwFoAU3aUSg2atBJcpR22/eIP+itCL4AIwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC83Nzk4NWE1OS1iZmM0LTRiYTAtOGQ4My0xYWE0 OGJhZmM3ZjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg31qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABmR9vyELc5b8U0CvibaoSInSgSZ/liYQWNAuuXBayYVUZzYmL9lc7Sm hKbc/09F6/aMOfKZ6gnKWOeGfKPt57CO8i7byH/FetKsU9lXJJcJ6jLjmu7HRXNv JuZscHFuYkl0nQn5lDI6BSNGPDdWrwwJfF9Mc09tKNUSUHzz/S1XmfzHluPMoBAH jJRmjHO0O1fCjO1C8nW8g2I2BBJ6zKGFHqiL0VJtXZYeum17UAXGEmoCSMYb5KfM ZRqfuLbbBFCicKT7imAHTB06RXu3/18YwjSkliow8cP71OfzBtPcwbYRFkF6mX8N IEPp5baw1A0G9ytPUeWpZ4MdoMf0y34= -----END CERTIFICATE-----Generated at Tue Sep 22 12:57:39 2026 by rpki-client